From b8081d98aa9a2db6bdb5429972bb5c734ad84c93 Mon Sep 17 00:00:00 2001 From: Matchu Date: Fri, 3 Sep 2021 13:16:36 -0700 Subject: [PATCH] Add new layer URLs to valid URL patterns --- api/outfitImage.js | 2 ++ 1 file changed, 2 insertions(+) diff --git a/api/outfitImage.js b/api/outfitImage.js index f44fd9a5..47380496 100644 --- a/api/outfitImage.js +++ b/api/outfitImage.js @@ -49,6 +49,8 @@ import getVisibleLayers, { const VALID_LAYER_URLS = [ /^https:\/\/(impress-asset-images\.openneo\.net|impress-asset-images\.s3\.amazonaws\.com)\/(biology|object)\/[0-9]{3}\/[0-9]{3}\/[0-9]{3}\/[0-9]+\/(150|300|600)x(150|300|600)\.png(\?[a-zA-Z0-9_-]+)?$/, /^http:\/\/images\.neopets\.com\/cp\/(bio|object|items)\/data\/[0-9]{3}\/[0-9]{3}\/[0-9]{3}\/[a-zA-Z0-9_-]+\/[a-zA-Z0-9_-]+\.(svg|png)(\?.*)?$/, + // NOTE: We don't validate the layer's libraryUrl, because assetImage performs validation better than we could! + /^https:\/\/impress-2020\.openneo\.net\/api\/assetImage\?libraryUrl=[^&]+(&size=(300|600))?$/, ]; async function handle(req, res) {